Tags: web 

Rating:

## Simple Login
![](image/challenge.png)

*[here is the challenge](https://incognito-web.herokuapp.com/)*

**Hint**

![](image/hint.png)

In the hint we can easily predict username and password, `admin:admin` also `PUT` method.

After logged in you can see,
*"You are not who you say to be, bcz he has put some extra measures to prevent this scenario"*

Open `Network Monitor` from your browser, get the request by refreshing the page

![](image/nm.png)

Edit and Resend the request with `PUT` method.

![](image/put.png)

Go to responce tab, there will be the flag.

![](image/flag.png)

```flag = ICTF{N0T_S0_S3Cur3d_853541}```

Original writeup (https://github.com/an0n4ce/CTF-Write-Ups/tree/master/Incognito-2.0-CTF/Simple-Login).